Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f/a2d3c9d8-b363-3a20-a4ac-7b17e6d5f34f.roa
File:                     a2d3c9d8-b363-3a20-a4ac-7b17e6d5f34f.roa (raw, json)
Hash identifier:          LzVAigDZ2nREtmCKQLuIy04yO6pNtvwjy16ecUPsgB4=
Subject key identifier:   CD:9F:1E:75:B7:D9:FC:87:C2:88:7F:19:8B:32:82:46:77:99:03:FD
Certificate issuer:       /CN=9e36dcff-6526-450f-a9d4-367f2c2d4a7f
Certificate serial:       010D0C9F43285847B6B62AC26463F865CA3F84D0
Authority key identifier: 84:F9:60:4D:69:2E:F4:73:8B:1B:24:A6:73:C0:85:78:58:DE:1B:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f/a2d3c9d8-b363-3a20-a4ac-7b17e6d5f34f.roa
Signing time:             Wed 30 Oct 2024 14:04:07 +0000
ROA not before:           Wed 30 Oct 2024 14:04:07 +0000
ROA not after:            Tue 28 Jan 2025 15:04:07 +0000
asID:                     57440000
IP address blocks:        2602:fc3b:5000::/38 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:b6:2a:c2:64:63:f8:65:ca:3f:84:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e36dcff-6526-450f-a9d4-367f2c2d4a7f
        Validity
            Not Before: Oct 30 14:04:07 2024 GMT
            Not After : Jan 28 15:04:07 2025 GMT
        Subject: CN=c8479b4f-fdc8-4f1f-9975-195147d7aa31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:07:71:a8:b1:b0:69:6b:1b:c1:cd:52:48:68:
                    ea:21:39:ce:e6:82:b5:96:f9:f4:0a:1c:4d:24:85:
                    a2:bb:33:d7:73:85:f4:db:a8:a5:9f:0e:49:da:0b:
                    d5:8a:3f:e1:bc:05:f6:24:15:69:b0:b0:13:ab:b7:
                    ee:db:64:af:5a:7d:16:8e:76:23:aa:86:46:a2:37:
                    e5:1f:1a:13:01:09:28:2d:db:81:75:70:51:a6:d7:
                    3d:89:ee:e8:e7:cd:dd:28:ec:04:59:4b:86:00:7e:
                    f5:5a:53:c4:a2:a0:55:60:a3:38:a1:25:7e:3b:4b:
                    c5:64:6b:0c:51:47:98:06:52:c6:7e:d4:39:cb:ba:
                    e8:99:4f:24:48:ee:4c:72:b2:2d:6f:3f:0a:10:0c:
                    0c:4b:3c:cf:db:8a:cb:2a:14:34:93:f9:9f:78:c4:
                    60:e5:a0:ff:5b:80:54:cc:83:6c:71:e1:bd:48:2d:
                    a3:7e:18:9d:57:99:b9:69:ec:ae:68:d2:b3:86:ff:
                    f5:28:f8:45:6c:15:47:f8:d5:f8:c1:e6:a7:58:52:
                    52:a4:0f:2a:08:a3:ad:28:af:bd:68:ec:0d:9a:af:
                    92:29:1e:f6:c7:72:19:5e:92:25:e5:dc:e8:4c:a6:
                    d0:c7:f7:5d:83:a3:44:07:c3:6b:c5:d3:69:62:0c:
                    fe:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9F:1E:75:B7:D9:FC:87:C2:88:7F:19:8B:32:82:46:77:99:03:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f/a2d3c9d8-b363-3a20-a4ac-7b17e6d5f34f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f/9e36dcff-6526-450f-a9d4-367f2c2d4a7f.crl

            X509v3 Authority Key Identifier:
                keyid:84:F9:60:4D:69:2E:F4:73:8B:1B:24:A6:73:C0:85:78:58:DE:1B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:5000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d2:b4:b9:86:af:f9:b4:22:02:e2:ae:88:c2:0a:53:29:7a:
         a4:d8:81:e2:d9:b3:b8:fc:3c:90:35:bf:ff:59:91:1e:c7:05:
         9b:e3:b9:d8:a7:b9:4c:24:cb:2c:c0:6b:8a:dd:d9:03:4e:e9:
         9c:6d:b4:91:a9:c0:94:cf:74:14:8e:63:0f:69:b7:97:1b:f7:
         ed:5f:0d:c0:8c:67:5b:8b:f0:f3:3f:8d:9e:10:90:f2:0f:17:
         80:d1:1b:be:22:80:a4:a5:02:2d:cc:ed:f7:86:a9:15:23:ff:
         9f:36:07:14:16:85:6e:19:ca:a1:bd:47:e3:93:fe:13:24:9a:
         b8:89:a0:72:79:92:32:6b:32:03:f6:fa:92:df:54:cc:3a:64:
         8d:5d:7a:9c:2f:0a:ad:90:97:31:eb:6e:8f:7f:ab:8f:33:27:
         06:f9:b5:3f:b4:c9:52:6e:7f:a2:23:b5:79:d7:71:0b:df:47:
         39:27:03:ac:bd:d9:5d:82:4d:53:44:a1:ff:09:54:66:9c:b8:
         18:39:f9:85:ba:84:0d:cc:b7:b4:10:5f:cd:ba:b1:aa:52:4e:
         c4:3a:c2:b4:c6:ed:37:17:e3:15:19:77:45:68:39:ac:f3:57:
         03:4d:63:b0:d8:32:f2:3c:eb:54:f1:c2:71:66:a2:e8:14:e3:
         a4:c3:2c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:04 2025 by rpki-client